Skip to main content
Confidential AI RedPill is an OpenAI-compatible inference API served by a gateway that runs inside a Trusted Execution Environment (TEE). Every response comes with evidence you can verify: an attestation report identifying the measured workload, and a signed receipt binding your request and response to it. Confidential models go further and run on a verified upstream enclave, with the channel bound before your prompt is forwarded.

​
Pick your path

Build with the API

Point your OpenAI or Anthropic SDK at one endpoint. Confidential and standard models, with a signed receipt on every response.

Use in agents

Run Claude Code, Codex, Pi, OpenCode, and more through Private AI Proxy, a desktop app that verifies the gateway and connects your agents.

Use the chat app

End-to-end encrypted chat with confidential models and private document knowledge bases.

​
Verify, don’t trust

After one request you can check, locally, that the gateway is a measured workload running in a genuine TEE, and that the response came from that workload unaltered and, for a confidential model, ran on a verified upstream enclave. How confidential AI works explains the model; Verify a response runs the checks.